Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a68d0aa0-09fd-3691-bbe2-00ad7e3c2015.roa
File:                     a68d0aa0-09fd-3691-bbe2-00ad7e3c2015.roa (raw, json)
Hash identifier:          FehEZv03wLBiJiSWyAyEr95M7aHEzlEw8lBIB39V3RQ=
Subject key identifier:   25:46:70:19:76:1D:A0:88:30:8A:89:95:9B:23:5B:0E:D4:2D:1C:4A
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E392A84D6
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a68d0aa0-09fd-3691-bbe2-00ad7e3c2015.roa
Signing time:             Tue 05 Nov 2019 01:25:18 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        198.170.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:39:2a:84:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=7750873f-01c5-4845-a757-34117a8267aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:79:1b:91:58:64:cc:cf:8c:32:1d:64:12:1d:
                    66:6e:21:89:9e:9e:33:ff:42:bb:39:7b:96:9e:7b:
                    47:ce:c7:39:50:2a:9c:b9:3f:7f:11:38:12:a1:95:
                    20:45:41:d8:a7:f1:c0:8b:95:a4:90:38:ec:d8:53:
                    32:85:df:69:6f:a0:15:ee:3f:13:75:59:c2:26:61:
                    5d:11:36:50:03:59:c0:c3:ba:a8:9a:a1:7c:26:8a:
                    5a:65:b1:64:ba:c0:26:7a:0e:8f:84:a1:c1:d1:34:
                    7e:e2:76:9d:93:2b:71:40:f5:8b:c4:50:4f:40:fc:
                    dd:7f:bc:60:9c:6c:aa:7d:5c:72:c6:a3:29:37:f2:
                    71:50:59:46:07:5b:53:e3:64:50:df:62:68:7d:b9:
                    eb:49:1b:75:15:f4:fe:83:55:fc:cd:86:37:ad:fd:
                    8b:1a:6f:17:8f:8b:99:33:07:54:5c:3e:f8:be:b1:
                    73:54:9b:ca:10:57:94:71:d4:2f:4d:9f:7e:d3:b0:
                    30:f2:0f:1f:04:a5:8a:0e:5f:6a:6d:c6:ef:81:5d:
                    88:fd:27:dc:80:9d:c9:27:65:d0:cc:a2:34:6e:5b:
                    14:17:51:c8:ba:dd:be:cd:49:47:16:28:58:be:2b:
                    50:30:c0:e5:29:8c:68:7f:03:1e:e7:3e:f0:0a:05:
                    0f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:46:70:19:76:1D:A0:88:30:8A:89:95:9B:23:5B:0E:D4:2D:1C:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a68d0aa0-09fd-3691-bbe2-00ad7e3c2015.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.170.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:2e:f4:70:82:e5:07:65:85:88:6f:a5:1c:39:8c:f8:61:74:
         61:4b:37:f0:9a:96:07:9d:96:8d:98:47:53:87:36:9c:af:c4:
         04:6d:90:8f:97:84:14:c5:e4:04:3b:73:39:a2:f1:68:01:ef:
         94:5f:47:90:3d:f3:db:5c:fc:49:8e:37:23:3a:82:9a:e6:4a:
         f7:ee:78:e2:3f:d7:de:7a:0e:91:7c:6c:16:83:5b:b3:a8:1f:
         ef:e3:f0:7d:e3:04:65:52:60:f1:a6:e4:a0:ad:11:c8:b3:47:
         2e:60:9d:d4:91:62:62:57:ac:55:e7:44:7d:62:d5:05:17:da:
         5e:9e:12:55:98:a9:49:3d:4e:65:8f:e6:53:4a:3d:4b:2c:a7:
         84:b1:4b:c5:e8:09:2d:ef:d6:63:0c:61:6e:5d:21:3d:1c:d5:
         8e:54:51:8c:fc:88:b4:ed:22:2f:07:1b:cf:90:91:63:93:11:
         f3:e0:27:83:cd:d4:6f:61:56:e6:d5:80:1b:31:e6:54:90:13:
         78:5e:0a:1f:47:7b:9c:c0:b2:ea:d1:0f:a6:4a:3f:b7:9f:5f:
         78:12:ef:08:4a:d7:e1:2d:16:77:0d:41:81:0a:f2:e4:d5:37:
         88:de:cd:94:ab:16:4d:8e:4c:9c:5c:0e:de:aa:d0:76:71:cc:
         20:fe:9e:52
-----BEGIN CERTIFICATE-----
MIIGPjCCBSigAwIBAgIUAQ0Mn0MoV21RzHPAQs/BbjkqhNYwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODA0MTAwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJDc3
NTA4NzNmLTAxYzUtNDg0NS1hNzU3LTM0MTE3YTgyNjdhYTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOZ5G5FYZMzPjDIdZBIdZm4hiZ6eM/9Cuzl7lp57
R87HOVAqnLk/fxE4EqGVIEVB2KfxwIuVpJA47NhTMoXfaW+gFe4/E3VZwiZhXRE2
UANZwMO6qJqhfCaKWmWxZLrAJnoOj4ShwdE0fuJ2nZMrcUD1i8RQT0D83X+8YJxs
qn1ccsajKTfycVBZRgdbU+NkUN9iaH2560kbdRX0/oNV/M2GN639ixpvF4+LmTMH
VFw++L6xc1SbyhBXlHHUL02fftOwMPIPHwSlig5fam3G74FdiP0n3ICdySdl0Myi
NG5bFBdRyLrdvs1JRxYoWL4rUDDA5SmMaH8DHuc+8AoFD98CAwEAAaOCA1QwggNQ
MB0GA1UdDgQWBBQlRnAZdh2giDCKiZWbI1sO1C0cSjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmL2E2OGQwYWEwLTA5ZmQtMzY5
MS1iYmUyLTAwYWQ3ZTNjMjAxNS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAcaqMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IB
AQBwLvRwguUHZYWIb6UcOYz4YXRhSzfwmpYHnZaNmEdThzacr8QEbZCPl4QUxeQE
O3M5ovFoAe+UX0eQPfPbXPxJjjcjOoKa5kr37njiP9feeg6RfGwWg1uzqB/v4/B9
4wRlUmDxpuSgrRHIs0cuYJ3UkWJiV6xV50R9YtUFF9penhJVmKlJPU5lj+ZTSj1L
LKeEsUvF6Akt79ZjDGFuXSE9HNWOVFGM/Ii07SIvBxvPkJFjkxHz4CeDzdRvYVbm
1YAbMeZUkBN4XgofR3ucwLLq0Q+mSj+3n194Eu8IStfhLRZ3DUGBCvLk1TeI3s2U
qxZNjkycXA7eqtB2ccwg/p5S
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:05 2024 by rpki-client on console-fra.rpki-client.org